2006/06/29

E-mailPOP3

(domain name): tku.edu.tw, acad.tku.edu.tw, yahoo.com(host name): www.tku.edu.tw, tw.yahoo.com(URL):http://www.tku.edu.twhttp://spirit.tku.edu.tw:8080/tku/index.jsphttp://163.13.136.10/

DNSDNS()Domain Name SystemIPIP :..com.edu.tw.tw.net.com.tw.org.tw.tku.edu.tw.acad.tku.edu.tw.ntu.edu.tw

*.com*.net*.orghttp://www.networksolutions.comhttp://www.godaddy.com*.com.tw*.net.tw*.org.tw*.twTWNIC: http://www.twnic.net.tw/newdn/name/name.htm*.tku.edu.twOA

sexyshopping crazyTANet

()DNSDNSOA

: example.tku.edu.twDNS: dns.example.tku.edu.twDNS IP: 163.13.2.3: : 2628

()DNSOA

: www.test.tku.edu.twIP: 163.13.2.3: : 2628

E-mailPOP3

(log)log:UNIX: /var/logWindows: ->->:

- :Jun 27 00:13:58 s90 cucipop[20526]: 890350027 163.13.142.12 0, 0 (0), 0 (0)Jun 27 00:14:02 s90 cucipop[20527]: authentication failure 490200200 61.228.115.83:Jun 27 14:55:55 mailscan4 sendmail[5382]: k5R0QF8X014325: to=, delay=06:29:07, xdelay=00:00:25, mailer=esmtp, pri=7413936, relay=m ail.atbeach.com. [216.240.105.209], dsn=4.2.0, stat=Deferred: 450 : Recipient address rejected: User unknown in local recipient table:2006-06-08 11:04:53 [EDIT]User wucf edit ipdata, IP=163.13.212.119.2006-06-19 00:57:05 User 118216(unit_reg) login, to=alloc, IP=163.13.164.221.2006-06-19 00:57:19 [ALLOC]User 118216() registered, IP=163.013.164.117.2006-06-19 00:57:26 User 118216 logout.2006-06-19 04:00:03 [ALLOC] Clean expired data, ip=163.013.166.107, duration=cont.

- IPproxy

log - log(rotate)PHP$fplog = fopen("/home/squid/logs/auth.log", "a");fwrite($fplog, date('Y-m-d H:i:s', time())." ".$msg."\n");fclose($fplog);

log - loglogPHP$mysql = mysql_pconnect(HOST, USER, PASSWORD);mysql_select_db(DATABASE, $mysql)$msg = smart_quote(trim($msg));mysql_query("INSERT INTO log (date, msg) VALUES (NOW(), '$msg');", $mysql);

log - logWindowsUNIXsyslog: log: log

E-mailPOP3

(Web Server)(Web Server)

ping->->C:\> ping 163.13.1.60Pinging 163.13.1.60 with 32 bytes of data:

Reply from 163.13.1.60: bytes=32 time=1ms TTL=63Reply from 163.13.1.60: bytes=32 time

C:\> ping 163.13.1.59Pinging 163.13.1.59 with 32 bytes of data:

Request timed out.Request timed out.Request timed out.Request timed out.

Ping statistics for 163.13.1.59: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),(-)

:pingIPping(gateway) pingDNS(163.13.1.60)

(Web)proxyproxy.tku.edu.tw, 3128 portproxy.edu.tw, 3128 port

(Web)IE:->->->HTTP()

(Web):

(Web)index.htmdefault.htm:

(Web):

(Web):

DNS:C:\> nslookup www.tku.edu.twServer: tkurs1.tku.edu.twAddress: 163.13.1.60

Name: www.tku.edu.twAddress: 163.13.1.205DNSIPIP DNSWindows XPDNS Cache

telnet80 port(port):C:\> telnet dns.tku.edu.tw 80 dns.tku.edu.tw... 80: (80 port)

C:\> telnet www.tku.edu.tw 80GET / HTTP/1.1Host: www.tku.edu.tw(Enter)HTTP/1.1 100 OKContent-Length: 8036

Content-Type: text/htmlServer: Microsoft-IIS/6.0X-Powered-By: ASP.NET.......... (Serverhtml)qHTTP/1.1 400 Bad RequestContent-Type: text/htmlDate: Wed, 28 Jun 2006 03:40:35 GMTConnection: closeContent-Length: 35

Bad Request (Invalid Verb)Connection closed by foreign host.()

E-mailPOP3

POP3:+OK Congratulations!()-ERR Invalid command(-)-ERR cucipop: Invalid password or username (-):+OK aa's mailbox has 0 message(s) ()-ERR aa logon failed (1332) at point 2 in PASS (-)

POP3telnet:C:\> telnet s91.tku.edu.tw 110 s91.tku.edu.tw...+OK Cubic Circle's v1.31 1998/05/13 POP3 ready user 491123456+OK 491123456 selectedpass x2468y+OK Congratulations!quit+OK Was it as good for you, as it was for me? (clean as a baby)(!!)

POP3C:\> telnet s91.tku.edu.tw 110 s91.tku.edu.tw... 110: (server)C:\> telnet s91.tku.edu.tw 110 s91.tku.edu.tw...+OK Cubic Circle's v1.31 1998/05/13 POP3 ready user 491123456+OK 491123456 selectedpass aa-ERR cucipop: Invalid password or username()

POP3IP()() E-Mail

E-mailPOP3

100KB: 100(KB) * 2000() = 200MB 100(KB) * 27,500() = 2.75GB 100 * 68,000 = 6.8GB10~20%

: http://dm.tku.edu.twE-Mail

(5MB)SMTP Server

Q & A